Hybrid InfoSec Manager — Lead Security Ops & Risk

eNGINE; Pittsburgh (Allegheny County); Hybrid; USD 120,000 - 160,000; Full time

Job summary

eNGINE is seeking a Manager, Information Security to lead a technically strong security team and mature our operations, governance, risk, and compliance capabilities. The role requires real hands-on understanding and the ability to challenge engineering assumptions while guiding strategic initiatives.

The ideal candidate will have 10+ years in IT/security and direct people management, working with executives and clients in a fast-paced environment.

Qualifications

• 10+ years of experience across information technology, information security, infrastructure, systems, networking, or related technical disciplines.
• Previous experience managing or supervising a team of technical security professionals.
• Strong understanding of network, systems, identity, endpoint, cloud, and infrastructure security.
• Experience with ISO 27001 and ISO 27701, with an understanding of how security controls are implemented and evaluated in real environments.
• Working knowledge of PCI-DSS requirements.
• Bachelor's degree in a related field or equivalent combination of education and professional experience.

Responsibilities

• Lead and develop a team of security engineers and technical security professionals.
• Establish priorities for security operations, projects, risk activities, and continual improvement initiatives.
• Provide direction and escalation support for day-to-day security operations without becoming the team's primary hands-on engineer.
• Evaluate security risks based on practical business and technical realities.
• Partner with leadership and GRC stakeholders on risk assessment, mitigation strategies, and security decision-making.
• Manage security policies, standards, procedures, and operational processes.
• Oversee compliance activities associated with ISO 27001, ISO 27701, and PCI-DSS, including audits and client requests.
• Review security controls and determine where requirements are mandatory versus compensating controls.

Skills

Leadership

Security governance

Risk management

Vendor management

Incident response

Communication

Technical communication

Education

Bachelor's degree or equivalent

Tools

Palo Alto

CyberArk

Tenable

CrowdStrike

Job description

eNGINE is seeking a Manager, Information Security to lead a technically strong security team and mature our operations, governance, risk, and compliance capabilities. The role requires real hands-on understanding and the ability to challenge engineering assumptions while guiding strategic initiatives.

The ideal candidate will have 10+ years in IT/security and direct people management, working with executives and clients in a fast-paced environment.